Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
File:                     34352e3233392e302e302f32322d3234203d3e20323638333438.roa (raw, json)
Hash identifier:          9VuzMtTJuOlMTVzH18CLy7nZRCPfHLplnj7yBLzGDEM=
Subject key identifier:   9A:F4:35:D3:48:D2:21:1C:56:FF:FC:CF:A7:94:93:84:AB:4D:C1:33
Certificate issuer:       /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial:       58E60578F5CA351DECECF9D7997C1E95D9A93CEA
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
Signing time:             Wed 11 Feb 2026 17:26:28 +0000
ROA not before:           Wed 11 Feb 2026 17:21:28 +0000
ROA not after:            Wed 10 Feb 2027 17:26:28 +0000
asID:                     268348
IP address blocks:        45.239.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e6:05:78:f5:ca:35:1d:ec:ec:f9:d7:99:7c:1e:95:d9:a9:3c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
        Validity
            Not Before: Feb 11 17:21:28 2026 GMT
            Not After : Feb 10 17:26:28 2027 GMT
        Subject: CN=9AF435D348D2211C56FFFCCFA7949384AB4DC133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:fa:1b:46:eb:bf:78:5c:fe:ff:37:d4:a9:
                    97:7c:29:73:70:c9:cb:30:14:63:96:df:bc:b1:d6:
                    8a:4d:07:22:53:da:91:d1:97:cb:0c:26:32:1b:c4:
                    29:a7:d3:3a:37:b4:f2:91:0e:24:9e:69:bd:1d:99:
                    1f:e7:98:b1:c6:71:00:27:77:b8:0f:16:36:a1:3a:
                    dd:09:13:7e:a5:31:5d:e2:06:1a:69:ef:0d:c4:c0:
                    d9:27:9f:5a:f2:df:b3:3f:b7:26:97:34:31:92:66:
                    4c:d4:58:4a:f6:25:cd:12:a6:f9:29:02:3d:3d:b3:
                    45:50:7c:50:df:75:84:78:46:82:5b:5d:2a:12:01:
                    12:d7:37:75:6d:99:0a:a1:91:69:81:d2:1f:cf:a4:
                    1b:0e:07:3c:1f:cc:56:28:61:52:c9:f7:91:d8:7c:
                    42:bd:8f:7c:bf:c2:cb:38:12:6b:9a:ff:65:ac:9c:
                    d0:fb:43:9a:c1:63:44:81:78:c3:fa:b7:0f:a7:ee:
                    84:30:79:15:0e:0b:92:4f:49:ea:40:8d:37:8d:0e:
                    aa:81:0d:f3:a1:d3:1a:2b:60:ca:71:04:99:a1:16:
                    30:4b:c4:39:9d:8f:a3:84:28:bd:ed:d5:38:db:00:
                    cf:15:4c:47:65:86:d0:84:3e:68:03:e5:5c:54:42:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:35:D3:48:D2:21:1C:56:FF:FC:CF:A7:94:93:84:AB:4D:C1:33
            X509v3 Authority Key Identifier:
                keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3234203d3e20323638333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:b6:1e:8c:f2:d8:c2:3c:f7:68:78:ba:7b:70:0a:d2:e9:
         fe:d0:dc:b2:22:c0:a6:70:e0:b8:f3:64:3d:8b:29:f4:75:e5:
         62:c6:7f:ee:2f:75:f3:3e:93:04:40:ea:aa:33:dc:10:12:eb:
         41:a8:d0:7c:83:75:7a:33:06:84:96:b9:ff:97:6a:69:c2:06:
         92:d7:15:40:39:be:dd:41:20:11:66:0b:8d:e7:48:8a:57:0f:
         90:5d:48:f4:03:65:f2:4d:92:92:48:75:6c:a6:cd:e8:70:eb:
         4a:96:eb:08:d7:0c:dc:df:2e:88:70:df:20:dc:8f:20:72:6e:
         6b:b5:a4:f4:f5:a1:80:00:e8:cf:60:5e:c3:1f:4e:7a:98:ec:
         b9:77:8d:64:a8:0e:4e:25:0b:bb:5b:39:ed:82:76:51:b7:c5:
         5b:cd:6d:62:af:32:67:8a:70:17:92:0d:e7:45:7f:bf:32:ba:
         c2:27:db:2f:14:73:f2:b0:96:b6:17:5d:4f:54:a1:33:58:1e:
         63:35:3b:e0:4c:e3:3e:34:10:a1:c4:0e:e9:8c:24:b2:71:06:
         5a:d4:81:68:25:1c:7c:1a:a4:55:3a:ef:a9:e6:ce:2e:9d:93:
         b6:b1:f3:9a:e0:a2:7e:d9:59:f0:3c:73:a7:8d:9a:54:57:6a:
         2a:d9:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:38 2026 by rpki-client